Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: bri6HE8PoNNIql3zBdRAJRuSp4VQf5OrvhPx6yQh4Ro=
Subject key identifier: F6:54:7F:E3:11:FB:AC:73:41:8C:5B:AC:AF:2B:C8:14:9F:1A:6F:A7
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019A503E1AA338B0359225F7B6CE47BBB72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 1067
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: OWVYhxd6err4DD+lzXL5cCw2IlOKDaXhRPRk3fuOJKA=)
2: KFGuuWvhGKXdRFWCPjT6bIvxr90.roa (hash: 5mNeMpLOgDP2WV53iNWD9JlTcJDz19nCtSLYypdRdgA=)
3: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=)
4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1a:a3:38:b0:35:92:25:f7:b6:ce:47:bb:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=f6547fe311fbac73418c5bacaf2bc8149f1a6fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:58:62:51:72:3a:14:9a:04:73:98:95:cb:
1a:d0:5e:48:cf:f5:aa:5a:70:70:2c:81:5f:8e:1f:
b4:2d:ed:cd:60:2d:f1:5c:40:14:6e:09:42:ea:91:
c9:18:51:ce:c8:e3:21:4c:5c:7e:85:7b:06:2f:84:
f3:41:68:11:7e:eb:e1:87:0d:1b:3f:44:1d:67:f5:
a7:b5:1a:2a:30:39:72:b5:33:8f:58:88:b5:6b:38:
0c:a1:cc:3c:ef:21:11:ac:1a:99:d5:d5:0a:48:fd:
33:29:a6:a1:7f:f5:93:97:f1:57:d6:55:41:52:82:
c4:c2:6e:48:25:3c:7c:33:5b:92:5a:12:49:3a:bc:
66:3c:db:5f:57:db:c8:e9:79:4c:83:c1:09:9b:c2:
9d:87:ab:18:ae:88:9c:d9:bf:2f:61:0c:fd:f0:5a:
64:73:89:81:f9:aa:20:b4:c0:59:13:43:69:6b:9d:
39:99:42:65:06:cf:b0:eb:27:46:a8:c1:ea:32:2c:
2a:50:80:31:ed:b8:62:27:ba:7b:35:de:fc:13:c3:
77:de:01:47:cf:8f:79:22:4e:10:35:2c:6b:7e:5a:
cd:bd:0d:3c:5c:cd:50:eb:e1:69:7a:3e:2c:1c:a4:
e1:d7:3f:8b:82:18:a0:5a:67:9a:4f:f6:c0:c0:cb:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:7F:E3:11:FB:AC:73:41:8C:5B:AC:AF:2B:C8:14:9F:1A:6F:A7
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:10:4f:27:19:d8:0e:63:a3:b4:ea:16:dd:f9:96:0b:ca:59:
c3:8b:9d:f0:83:e5:80:2a:95:58:0e:55:4d:a8:88:22:db:a7:
34:7d:ef:d5:22:e0:6f:96:e9:95:f6:43:47:5a:3a:79:81:25:
fe:b2:79:80:7e:08:fa:59:3f:80:64:61:63:fe:59:f9:5a:79:
85:a0:24:52:14:94:da:01:55:a1:55:19:66:fc:d4:da:3c:e2:
3a:86:48:be:42:e2:b1:89:e9:c2:42:58:e9:3f:db:0e:0f:bc:
de:50:48:da:cd:53:fc:4b:e4:e0:15:ab:37:7b:57:82:69:41:
7d:a4:75:55:9b:d8:2c:55:60:92:2c:da:3a:cf:d1:ed:d1:d3:
aa:e5:6f:2a:8e:4c:f6:df:75:a3:1c:91:dd:ea:34:56:95:dd:
b0:d3:bc:48:fc:5d:3e:10:6a:da:e3:3c:05:7e:94:32:fa:d8:
b8:f1:8f:d1:f9:10:68:a7:d6:ae:22:f2:d7:b2:6b:5e:63:59:
76:3e:7d:17:46:33:13:af:ed:00:93:63:8f:2d:98:a0:12:16:
39:90:60:6f:7f:db:81:62:4b:6e:44:21:80:f6:a0:10:d7:1a:
2b:1d:35:4d:17:aa:ba:1e:40:41:af:40:d7:fc:50:86:42:ba:
c8:07:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:58 2025 by rpki-client